Monitoring Splunk

How to enable monitoring console via command line

xxmazurt
New Member

Hello,

I have a problem with finding where in configuration files should I change to enable monitoring console in my distributed environment.
Long story short:
I have distributed environment: a few indexers, a few search heads, cluster node.
I would like to configure for them monitoring console. I can do it via WebUI but in my case I would like to know which configuration file from command line should I edit in order to do the same. Could you help please ?

0 Karma
1 Solution

harsmarvania57
Ultra Champion

Hi @xxmazurt,

On which node would you like to setup monitoring console? Because splunk recommend it to setup on standalone search head which is not used for general purpose or you can setup on CM as well if CM is not heavily loaded.

As far as I know Monitoring Console configuration will be in $SPLUNK_HOME/etc/system/local/distsearch.conf and $SPLUNK_HOME/etc/apps/splunk_management_console/local/splunk_management_console_assets.conf

EDIT: After changing name from Splunk DMC to Monitoring Console it looks like app name changed from splunk_management_console to splunk_monitoring_console so in that case please check $SPLUNK_HOME/etc/apps/splunk_monitoring_console/local/splunk_monitoring_console_assets.conf

View solution in original post

tro
Path Finder

Hello,

here you can find a steps which must be taken to setup distributed mode: https://community.splunk.com/t5/Monitoring-Splunk/Turn-on-Monitoring-Console-Distributed-Mode-via-CL...

Tags (1)
0 Karma

harsmarvania57
Ultra Champion

Hi @xxmazurt,

On which node would you like to setup monitoring console? Because splunk recommend it to setup on standalone search head which is not used for general purpose or you can setup on CM as well if CM is not heavily loaded.

As far as I know Monitoring Console configuration will be in $SPLUNK_HOME/etc/system/local/distsearch.conf and $SPLUNK_HOME/etc/apps/splunk_management_console/local/splunk_management_console_assets.conf

EDIT: After changing name from Splunk DMC to Monitoring Console it looks like app name changed from splunk_management_console to splunk_monitoring_console so in that case please check $SPLUNK_HOME/etc/apps/splunk_monitoring_console/local/splunk_monitoring_console_assets.conf

xxmazurt
New Member

Hi harsmarvania57,

Thank you for the answer. I found what I've been looking for at $SPLUNK_HOME/etc/apps/splunk_monitoring_console

I have intention to put CM on master node.

0 Karma

Mayurmpatil
Path Finder

I guess below two files as well,

/opt/splunk/etc/apps/splunk_monitoring_console/lookups/assets.csv
/opt/splunk/etc/apps/splunk_monitoring_console/lookups/dmc_forwarder_assets.csv

0 Karma

harsmarvania57
Ultra Champion

If my answer helped you then you can accept it and up vote my answer so that this question will be closed.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

May 2026 Splunk Expert Sessions: Security & Observability

Level Up Your Operations: May 2026 Splunk Expert Sessions Whether you are refining your security posture or ...

Network to App: Observability Unlocked [May & June Series]

In today’s digital landscape, your environment is no longer confined to the data center. It spans complex ...

SPL2 Deep Dives, AppDynamics Integrations, SAML Made Simple and Much More on Splunk ...

Splunk Lantern is Splunk’s customer success center that provides practical guidance from Splunk experts on key ...